Summary
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* posix cpu timer use-after-free may lead to local privilege escalation (CVE-2022-2585)
* Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP option (CVE-2022-30594)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* kernel crash after reboot of T14/G2 AMD laptop (mt7921e module) (BZ#2095653)
* execve exit tracepoint not called (BZ#2106661)
* Matrox black screen on VGA output on some systems. (BZ#2112017)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (BZ#2121129)
* watchdog BUG: soft lockup - CPU#30 stuck for 34s! [swapper/30:0] (BZ#2127857)
* Update cifs to 5.16 (BZ#2127858)
* Bad page state in process qemu-kvm pfn:68a74600 (BZ#2127859)
* vfio zero page mappings fail after 2M instances (BZ#2128791)
* The kernel needs to offer a way to reseed the Crypto DRBG and atomically extract random numbers from it (part 2) (BZ#2128970)
Enhancement(s):
* Need to enable hpilo to support new HPE RL300 Gen11 for ARM (aarch64) (BZ#2129453)
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | bpftool | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-abi-stablelists | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-core | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-cross-headers | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-core | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-devel | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-devel-matched | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-modules | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-debug-modules-extra | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-devel | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-devel-matched | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-doc | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-headers | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-modules | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-modules-extra | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-tools | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-tools-libs | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-tools-libs-devel | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-core | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-devel | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-devel-matched | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-modules | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | kernel-zfcpdump-modules-extra | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | perf | 5.14.0-70.30.1.el9_0 |
| AlmaLinux · 9 | python3-perf | 5.14.0-70.30.1.el9_0 |
Vulnerabilities 2
-
Medium 5.3
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed…
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…